Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File:                     oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier:          1wwL+N3YCg5FZPfkpS26AwdShfTKnIfIddF10JgeNnw=
Subject key identifier:   51:75:7B:DE:CC:ED:C0:2B:41:2E:C2:78:89:2C:F6:66:CF:BC:2F:87
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer:       /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial:       019D28BB274013AE9F6314A5569A0D828DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number:          0E50
Signing time:             Thu 26 Mar 2026 06:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:46 +0000
Files and hashes:         1: YNzgRRzWdr4v8acL2_mrerBZEBY.roa (hash: 0vVcOkUILWsiRv1XZ/svhufbrbQADvOSN3QtFvRS5U8=)
                          2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: yJRYh0OqvKd1JoBi2AGvtzvrCsRH4E/dTJiXf2Jgbfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:27:40:13:ae:9f:63:14:a5:56:9a:0d:82:8d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
        Validity
            Not Before: Mar 26 06:00:46 2026 GMT
            Not After : Mar 27 06:00:46 2026 GMT
        Subject: CN=51757bdeccedc02b412ec278892cf666cfbc2f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:50:1d:5c:52:f8:ea:ff:66:fa:35:fe:bf:
                    ae:11:86:e8:4f:a2:0a:9c:d4:bf:7e:e6:68:bc:0a:
                    d9:1d:23:9a:df:45:63:a5:77:f2:5b:2d:8e:b0:ab:
                    a2:75:15:9b:5b:9a:11:7f:91:6d:58:35:9e:90:ca:
                    c8:d5:d7:e7:cb:34:ec:41:de:0f:23:2a:4d:5f:f3:
                    7d:15:c7:2c:0c:ca:a1:cb:1d:33:12:fd:ac:6d:de:
                    b1:41:21:c4:05:06:9d:92:db:2c:82:f1:3b:16:98:
                    f1:ab:b4:49:6d:c9:73:79:5b:17:9a:8f:e8:c1:59:
                    26:8f:2a:49:9f:d9:5c:2c:5a:c8:e8:cc:17:72:cb:
                    4a:16:18:43:db:ea:ae:9b:58:d1:a5:b1:b9:bb:40:
                    c7:9a:88:93:d5:a0:e7:b9:8b:92:0d:56:25:f9:77:
                    81:64:9d:c1:b5:0f:73:66:54:98:11:e3:59:0c:25:
                    5b:6e:e6:ff:1a:c4:ec:0c:b9:54:4a:78:db:75:b0:
                    67:ae:7d:15:f6:82:f0:29:fd:3a:e9:72:ca:9d:6f:
                    84:00:98:b2:b7:67:3f:9c:6d:7a:fa:5c:ed:99:a5:
                    df:b4:95:bf:ef:09:20:be:d6:52:6e:18:71:03:4c:
                    fb:60:ba:27:8f:7e:b0:b9:16:8c:fa:aa:e1:72:27:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:7B:DE:CC:ED:C0:2B:41:2E:C2:78:89:2C:F6:66:CF:BC:2F:87
            X509v3 Authority Key Identifier:
                keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:31:f7:88:0e:ee:37:93:68:db:e2:7d:c3:9e:fe:86:8a:e4:
         7a:4d:68:02:03:4a:4d:e9:22:6a:2c:3c:ed:38:b9:83:6f:a7:
         b9:9f:d2:58:af:86:18:98:8a:ad:7d:58:15:d6:6c:a5:b1:57:
         a2:84:51:98:fd:d8:8a:72:07:19:95:7c:98:c0:67:fd:07:e1:
         73:ac:e1:c4:21:9b:bb:9e:43:06:8d:12:39:5e:70:49:68:7b:
         04:4c:ab:ca:d8:b9:ac:84:a5:6a:41:85:05:51:15:8c:2a:00:
         51:81:fa:15:f9:64:a1:38:5f:e1:60:9a:53:53:a4:7c:f3:e9:
         9d:99:af:53:5c:a9:85:0a:25:81:8c:00:af:67:71:eb:19:70:
         d3:69:30:42:42:cd:88:7d:12:48:41:43:43:65:fe:7d:11:d0:
         cc:cb:a4:82:f0:f1:56:11:22:e5:bf:e8:4a:d1:aa:17:f6:11:
         e9:64:77:8b:47:08:87:0e:d9:86:c0:e2:e3:ef:90:a3:ef:54:
         28:5a:0a:67:06:81:ac:2d:55:01:6d:43:a3:91:3d:72:ef:7b:
         32:a8:a3:ec:44:42:e0:06:e1:ab:1d:9d:72:25:cc:d3:75:b1:
         76:95:c4:cf:1a:98:e0:50:4e:ef:be:0f:e7:32:62:ac:25:ce:
         8f:cf:59:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouydAE66fYxSlVpoNgo3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMThkNjgxMTVkYzRiNzMwZjE1NzkwNmIwNDQyNmU1OTli
M2E4Y2EwHhcNMjYwMzI2MDYwMDQ2WhcNMjYwMzI3MDYwMDQ2WjAzMTEwLwYDVQQD
Eyg1MTc1N2JkZWNjZWRjMDJiNDEyZWMyNzg4OTJjZjY2NmNmYmMyZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIVQHVxS+Or/Zvo1/r+uEYboT6IK
nNS/fuZovArZHSOa30VjpXfyWy2OsKuidRWbW5oRf5FtWDWekMrI1dfnyzTsQd4P
IypNX/N9FccsDMqhyx0zEv2sbd6xQSHEBQadktssgvE7Fpjxq7RJbclzeVsXmo/o
wVkmjypJn9lcLFrI6MwXcstKFhhD2+qum1jRpbG5u0DHmoiT1aDnuYuSDVYl+XeB
ZJ3BtQ9zZlSYEeNZDCVbbub/GsTsDLlUSnjbdbBnrn0V9oLwKf066XLKnW+EAJiy
t2c/nG16+lztmaXftJW/7wkgvtZSbhhxA0z7YLonj36wuRaM+qrhcies1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF1e97M7cArQS7CeIks9mbPvC+HMB8GA1UdIwQY
MBaAFKAY1oEV3EtzDxV5BrBEJuWZs6jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2Qt
NWNiYzYzNmJkN2U3LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2QtNWNiYzYzNmJkN2U3
LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDH3iA7u
N5No2+J9w57+horkek1oAgNKTekiaiw87Ti5g2+nuZ/SWK+GGJiKrX1YFdZspbFX
ooRRmP3YinIHGZV8mMBn/Qfhc6zhxCGbu55DBo0SOV5wSWh7BEyryti5rISlakGF
BVEVjCoAUYH6FflkoThf4WCaU1OkfPPpnZmvU1yphQolgYwAr2dx6xlw02kwQkLN
iH0SSEFDQ2X+fRHQzMukgvDxVhEi5b/oStGqF/YR6WR3i0cIhw7ZhsDi4++Qo+9U
KFoKZwaBrC1VAW1Do5E9cu97Mqij7ERC4Abhqx2dciXM03WxdpXEzxqY4FBO774P
5zJirCXOj89Z2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:45 2026 by rpki-client